PT-2015-7904 · Postgis · Postgis

Published 2015-05-11 · Updated 2015-05-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PostGIS versions prior to 2.1.3 PostGIS version 2.1.7

Description The PostGIS Raster support in PostGIS may give more privileges to users than an administrator is willing to grant, including reading files from the filesystem and opening connections to network hosts.

Recommendations For PostGIS versions prior to 2.1.3, update to version 2.1.7 to fix the issue. For PostGIS version 2.1.7, no further action is required as this version fixes the issue.

Related Identifiers

MGASA-2015-0207

Affected Products

Postgis

References · 12

• https://lists.fedoraproject.org/pipermail/package-announce/2015-April/154704.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0207.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0207 · Vendor Advisory
• http://postgis.net/2014/09/10/postgis-2.1.4 · Note
• http://postgis.net/2013/11/08/postgis-2.1.1 · Note
• https://bugs.mageia.org/show_bug.cgi?id=15741 · Note
• http://svn.osgeo.org/postgis/tags/2.1.7/NEWS · Note
• http://postgis.net/2014/03/31/postgis-2.1.2 · Note
• http://postgis.net/2014/05/19/postgis-2.0.6_and_2.1.3 · Note
• http://postgis.net/2014/12/18/postgis-2.1.5 · Note
• http://postgis.net/2015/04/06/postgis-2.1.7 · Note
• http://postgis.net/2015/03/20/postgis-2.1.6 · Note